Staredit Network > Forums > Lite Discussion > Topic: Should we keep researching code execution?
Should we keep researching code execution?
Jun 30 2014, 11:08 pm
By: trgk  

Jun 30 2014, 11:08 pm trgk Post #1



Custom code injection : Let users create their own code(dll, exe) and put it inside your map, making code auto-executed as their map run.

Custom code execution can enable everything you've imagined in SC. You can even recreate Leauge of Legend in SC. Everything is possible.
But Custom code execution may compromise security severely. You can also create virus in SC. Everything is possible.

So, should research for custom code execution be continued?

Post has been edited 2 time(s), last time on Jul 1 2014, 12:56 am by trgk. Reason: Clarification.



EUD

Jul 1 2014, 6:30 am TF- Post #2



If another security breach is created then it will be patched out relatively soon, Blizzard has the source code but will never use it to add something to sc1, only to protect their dignity by keeping the game barely functional.




Jul 1 2014, 1:56 pm Sand Wraith Post #3

she*

Would this require a different SCBW executable? I don't understand SCBW's normal map process, so I'm just unsure as to how you can actual inject code that will be executed into a map.




Jul 1 2014, 3:12 pm jjf28 Post #4

Oh bother...

Abusing overflows, how else? http://www.staredit.net/topic/16427/ note that my exe launching outline lacks many non-zero'd values that need to be worked backwards from, and an example map which I've neglected to complete.

As for my part i'll press forward with discoveries and trust mapmakers; no one abused EUDA's before they were patched to make a virus AFAIK, and it was 400x less work back then to launch executable code.



Rs_yes-im4real - Clan Aura - jjf28.net84.net

Reached the top of StarCraft theory crafting 2:12 AM CST, August 2nd, 2014.

Jul 1 2014, 4:27 pm Sacrieur Post #5

Still Napping

Do it for science!

Blizzard will just have to patch the game.



None.

Jul 1 2014, 4:38 pm Black_Overseer Post #6



So what are you afraid of?




Jul 1 2014, 4:43 pm Azrael Post #7



"Now I am become Death, the destroyer of worlds."




Jul 1 2014, 6:13 pm NudeRaider Post #8

We can't explain the universe, just describe it; and we don't know whether our theories are true, we just know they're not wrong. >Harald Lesch

Quote from Sacrieur
Do it for science!

Blizzard will just have to patch the game.
At this point I think they'll rather just close down bnet for sc1 and declare it dead.




Jul 2 2014, 6:44 am TF- Post #9



Quote from NudeRaider
Quote from Sacrieur
Do it for science!

Blizzard will just have to patch the game.
At this point I think they'll rather just close down bnet for sc1 and declare it dead.
And opensource the game as consolation :wtfawesome:




Jul 2 2014, 9:01 am trgk Post #10



My opinion :
1. People can't avoid downloading executable code if there is one in the map they're playing.
2. We cannot revert exploit disclosure once it is disclosed.
(It have already been disclosed in rather very cryptic manner. I understand it though with some difficulties)
3. Exploits shouldn't be disclosed until they are fixed to prevent possible abuses.
But Blizzard won't fix SC. (I would be very happy if they would) Therefore shouldn't disclose the method for it.
4. People may do research, but they shouldn't distribute "How to put your own DLL inside your map in 10 minutes" manual things.

cf) Blizzard patching SC1 again? 1.16.2? They dropped SC1 support several years before. I think that's just a false hypothesis;



EUD

Jul 2 2014, 10:35 am LoveLess Post #11

Let me show you how to hump without making love.

Make a map that has an EUDA enabler, injecting the needed bits into the players' StarCraft, then you can stop research.



None.

Jul 2 2014, 8:07 pm Azrael Post #12



Quote from LoveLess
Make a map that has an EUDA enabler, injecting the needed bits into the players' StarCraft, then you can stop research.

Alright, my ears just officially perked up :P




Jul 2 2014, 9:09 pm iCCup.xboi209 Post #13



Quote from LoveLess
Make a map that has an EUDA enabler, injecting the needed bits into the players' StarCraft, then you can stop research.
this




Options
  Back to forum
Please log in to reply to this topic or to report it.
Members in this topic: None.
[06:51 am]
SolarHound -- Hey if anyone can, I made a post about an error I get opening a SCBW map with SCMdraft 2, need any help.
[06:44 am]
Lanthanide -- Suicidal Insanity
Suicidal Insanity shouted: Since scmdraft used to not have any trigger editor besides plugins, and classic trigedit originally was a plugin, there is a lot of classic trigedit UI state in the trigger data holder. And I am now splitting all of that up into real UI and real data, to support multiple classic trigedit windows =)
oooh, multiple windows will be good
[06:42 am]
Lanthanide -- not sure how relevant that is now with SC being free and not using CD keys though
[06:42 am]
Lanthanide -- so that's why SI didn't want to give the code out
[06:42 am]
Lanthanide -- Jack
Jack shouted: Is scmdraft on github/ever going to be open source?
not on github and probably won't ever be. Starcraft strangely uses the player's CD key in order to create the in-game text. since scmdraft also uses the in-game text, there is code in there that harvests the cd key out of your SC install
[06:40 am]
Corbo -- Ahli
Ahli shouted: NudeRaider I wonder if that landing attempt broke any regulations of flight safety... I'm torn between heroic and unnecessarily risky...
i dont think so. Windy landings like that are far more common than you think. Just youtube. There are a lot more scary looking things like that. Also on fucking 747s and those things weight tons unlike this aircraft
[03:33 am]
KrayZee -- "Look! Up in the Sky! It's a Bird...It's a Plane... It's Superman!" I suppose they appreciate birdwatching and the Blue Angels.
[01:55 am]
O)FaRTy1billion[MM] -- I think SI already said no
[01:40 am]
Jack -- Is scmdraft on github/ever going to be open source?
[12:16 am]
Zycorax -- :wob:
Please log in to shout.


Members Online: Roy, Kimsan, Pr0nogo